Good Questions to Ask about Data Destruction

Every day the media publishes stories about companies whose data resources are hacked, resulting in loss or theft of private, corporate and personal data. While many of these incidents involve people using online computer devices with all sorts of security technology, hardware, software and processes in place, they also involve organizations and municipalities whose hardware assets were retired, but not properly processed, i.e., sanitized, destroyed or disposed of.

How is this possible today? This can happen when the vendors or employees in which the company places its trust are not qualified to handle such an important task. The key to understanding this issue comes from asking your vendors the right questions.

Inform Yourself

There are basically two methods for destroying data: erasing the data from the device or physically destroying the device. Here are what you need to consider.

This solution option uses software to overwrite the data with 1s and 0s with the purpose of destroying all electronic data residing on the digital media. But is this method 100% effective? Can you rely on a technician at your company to manually perform this task successfully as the volume of end-of-life devices increases? Also ask yourself, if a breach occurs, do you have the appropriate documentation to defend yourself and your employer?

According to Security Boulevard, New research has discovered that “globally, organizations’ overconfidence in their data sanitization methods makes them more vulnerable to a data breach: …36% reported relying on inappropriate data removal methods—using data wiping methods such as formatting, overwriting, using free software tools or paid software-based tools without certification or physical destruction (both degaussing and shredding) with no audit trail.”

Option 2: Physical Destruction. Consumers and businesses are accustomed to shredding paper to destroy data. More recently, however, there are increasing options to “shred” your disk drives as an alternative method for data destruction. However, this service is not considered a particularly “green” option because the destroyed HDDs cannot be reused. Consumers and businesses need to weigh the pros and cons along with the cost considerations. Destroying hard drives can sometimes be more costly than erasure methods.

The vendor who is selling services to dispose of your IT assets must not only understand your data destruction requirements but also be an expert in the solution technologies to achieve those objectives. Ask your vendor about what certifications they have. Are they NAID AAA Certified (National Association for Information Destruction)? NAID is the standard-setting body that advocates for the best practices in secure destruction.

IT Asset Disposition (ITAD) experts are supposed to have the knowledge and experience in industry standards and best practices for IT lifecycle management. This involves continually updating their processes and certifications for limiting customer data liability. Your vendor should be capable of explaining the pros and cons of the different destruction options for disposing of your hardware and the associated costs.

Here are a few key questions you should ask your vendor about data destruction solutions.

Q: Can I perform the data destruction myself?

Consumers and companies who feel compelled to do the erasure themselves should first consider the necessary documentation for satisfying compliance requirements. This requires understanding the rules and taking the time to appropriately document each erasure. Doing it yourself may appear to “save a buck” but also opens the door to increased risk and expense.

The risks also apply to performing your own physical shredding. Examples of individuals performing their own low-cost and non-secure physical destruction options include drilling holes in hard drives, actually shooting them with bullets, slamming them with hammers/sledgehammers, dunking them in water, and other “homemade” solutions. Each of these options “disables” the drive but does not completely remove the data. As a result, many forensics experts would claim that data is still recoverable from these homegrown methods.

Q: Should I be cautious of low-cost data erasure solutions?

A: Low-cost solutions may not include certifications that meet the strictest standards. As a result, they often have higher failure rates on systems they process. Ideally, the erasure process should:

Allow for selection of a specified and recognized standard, based on your unique needs

Support erasure of the type and number of devices being erased, and

Provide verification that the overwriting method has been successful and has removed data across the entire device.

A: The best solution should provide cost-effective performance that meets your business data risk and compliance objectives and your device end-of-life goals. This requires both industry and technical acumen from your advisor. It also requires process automation that removes the manual reporting and processing.

Q: How long should a disk wipe take to complete?

A: A comprehensive erasure tool should securely overwrite any device at 30-40 GB per minute. New flash media and encryption removal technology can make this process even faster. Be aware that low-cost tools may lack the appropriate drivers and ATA commands to efficiently erase your device.

Q: How many times should an ITAD wipe a computer?

A: According to Bernard Le Gargean, Product Manager of Blancco Drive Eraser, “One pass is enough. However, to ensure the overwriting process has been effective, major agencies and government bodies worldwide (NIST 800-88, NCSC, BSI and others) state that the verification of data erasure is mandatory for full compliance with their standards. Other research supports this idea.”

A: Store audit reports a minimum of 7 years or as required by your policy advisors or government regulators.

Q: What if I don’t have the time or manpower for this?

A: Work with a trusted and certified advisor.

Castaway Technologies believes you should be as informed as possible about the latest best practices for safely and securely mitigating risks involved with the turnover of data-bearing IT assets. This will allow you to focus on what really matters – running your business.

While most companies focus on the initial phases of the IT lifecycle, Castaway is the premier ITAD specialist that works with businesses and organizations to streamline the end of their IT lifecycle processes. Recently, Castaway was granted AAA Certification by NAID®, a division of the International Secure Information Governance and Management Association™ (i-SIGMA™). These organizations set the standards for best practices in the Information Destruction and ITAD (IT Asset Disposition) industries.

Q: So finally, what is the ideal data destruction solution?

A: The perfect solution would include either an onsite or full chain of custody program that would include software sanitization with documentation, followed by physical destruction. This may be cost-prohibitive, so consumers/businesses need to weigh all their options. This provides all the more reason to contact a NAID AAA Certified ITAD company like Castaway to discuss options and generate a customized program that fits a budget while meeting/exceeding requirements/compliance.

What our clients are saying:

Lindsay Walkinshaw, Project Manager, Dartmouth College

Working with Castaway has been a seamless experience. The technicians were great about communicating arrival times and were very accommodating. Jay has been very prompt with responses and was able to schedule pick ups in a short timeframe. I appreciate their help.

- Lindsay Walkinshaw, Project Manager, Dartmouth College

Castaway Technologies | IT Asset Disposition

2019-04-02T16:20:53+00:00

- Lindsay Walkinshaw, Project Manager, Dartmouth College

Working with Castaway has been a seamless experience. The technicians were great about communicating arrival times and were very accommodating. Jay has been very prompt with responses and was able to schedule pick ups in a short timeframe. I appreciate their help.

Coordinator, Facility Operations, Software Industry

The staff at Castaway is very professional and knowledgeable. The Castaway Services Team has done a fantastic job of helping clear out old equipment for recycling. Castaway has been a great decision and I would recommend their service to anyone.

- Coordinator, Facility Operations, Software Industry

Castaway Technologies | IT Asset Disposition

2019-02-26T20:27:32+00:00

- Coordinator, Facility Operations, Software Industry

The staff at Castaway is very professional and knowledgeable. The Castaway Services Team has done a fantastic job of helping clear out old equipment for recycling. Castaway has been a great decision and I would recommend their service to anyone.

Molly Paradis, Scleroderma Foundation

Thank you so much Patrick, I have to say that your employees were kind, prompt and were very speedy. I was impressed at how willing you were to go above and beyond to help new clients and were always available to answer any questions that I had. If there is anything else that the Scleroderma Foundation needs I will surely keep you and Castaway Technologies in mind.

- Molly Paradis, Scleroderma Foundation

Castaway Technologies | IT Asset Disposition

2019-02-26T20:17:13+00:00

- Molly Paradis, Scleroderma Foundation

Thank you so much Patrick, I have to say that your employees were kind, prompt and were very speedy. I was impressed at how willing you were to go above and beyond to help new clients and were always available to answer any questions that I had. If there is anything else that the Scleroderma Foundation needs I will surely keep you and Castaway Technologies in mind.

Joanne Dunn, Metro Sign & Awning

It was a pleasure working with you. On the two occasions that we’ve used Castaway’s services for disposing of office equipment, we have been very pleased. Your team is professional, quick to reply and very efficient. I would highly recommend your business to anyone. Thank you!

- Joanne Dunn, Metro Sign & Awning

Castaway Technologies | IT Asset Disposition

2019-02-26T20:23:33+00:00

- Joanne Dunn, Metro Sign & Awning

It was a pleasure working with you. On the two occasions that we’ve used Castaway’s services for disposing of office equipment, we have been very pleased. Your team is professional, quick to reply and very efficient. I would highly recommend your business to anyone. Thank you!

https://castawaytech.com/testimonials/joanne-dunn-metro-sign-awning/

Systems Administrator, Construction Industry

I have called upon Castaway Technologies multiple times to securely recycle and shred our IT equipment, including computers/servers, hard-drives, printers, APC battery units, wiring, etc.. They are always on time, efficient and extremely quick to send back certified receipts confirming the secure process was completed, therefore keeping us in compliance.

- Systems Administrator, Construction Industry

Castaway Technologies | IT Asset Disposition

2019-02-26T20:25:47+00:00

- Systems Administrator, Construction Industry

I have called upon Castaway Technologies multiple times to securely recycle and shred our IT equipment, including computers/servers, hard-drives, printers, APC battery units, wiring, etc.. They are always on time, efficient and extremely quick to send back certified receipts confirming the secure process was completed, therefore keeping us in compliance.

Tim Roach, Technology Manager

Castaway has been a delight to work with over the years. Their professionalism, attention to detail and reporting capabilities help manage our end of IT life cycle with the utmost confidence. I would highly recommend their services.

- Tim Roach, Technology Manager

Castaway Technologies | IT Asset Disposition

2019-02-26T20:22:41+00:00

- Tim Roach, Technology Manager

Castaway has been a delight to work with over the years. Their professionalism, attention to detail and reporting capabilities help manage our end of IT life cycle with the utmost confidence. I would highly recommend their services.

https://castawaytech.com/testimonials/tim-roach-technology-manager/

IT Director, Technology Industry

Castaway is a very professional organization they arrive at the time they say they will be there. Their project team package the decommissioned equipment in a professional manner and clean up once they are done.

- IT Director, Technology Industry

Castaway Technologies | IT Asset Disposition

2019-02-26T20:26:20+00:00

- IT Director, Technology Industry

Castaway is a very professional organization they arrive at the time they say they will be there. Their project team package the decommissioned equipment in a professional manner and clean up once they are done.

Security Analyst, Technology Industry

We selected Castaway technologies to securely remove and dispose of all of our outdated IT equipment. They came by and quickly removed everything from our location. Their service was exceptional and exceeded our expectations! All we had to do is pick up the phone and they do the rest. I would recommend them to anyone who needed to decommission and retire any obsolete IT assets.

- Security Analyst, Technology Industry

Castaway Technologies | IT Asset Disposition

2019-02-26T20:28:00+00:00

- Security Analyst, Technology Industry

We selected Castaway technologies to securely remove and dispose of all of our outdated IT equipment. They came by and quickly removed everything from our location. Their service was exceptional and exceeded our expectations! All we had to do is pick up the phone and they do the rest. I would recommend them to anyone who needed to decommission and retire any obsolete IT assets.

A few words about us

Castaway Technologies helps companies safely and securely mitigate the risks involved with the turnover of old, data-bearing IT assets so they can focus on what really matters – running their business. Contact a Castaway ITAD specialist today to learn more.